Skip to content

art.allover/agentee

by allover.art · remote · no sign-in to list tools · v1.0.0 · published by art.allover

Shop all-over print cotton tees with your AI agent: search, cart, promos, checkout. Human pays.

Deletes · 3Final · 1Changes · 23
CompareRegistry entry

36 tools: 3 can delete or cancel things, 1 do something that can't be undone, 23 change things and 9 only read.

Scanned Oct 21, 2026

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agentee https://allover.art/mcp

Findings

Matches of fixed checks, with the text they matched.

6 warn
  • Warnget_product

    The server marks "get_product" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_product" says "get": a word for reading.

    What this check looks for
  • Warncheckout_link

    The server marks "checkout_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "checkout_link" says "checkout": a word for a change.

    What this check looks for
  • Warnremove_promo

    The server marks "remove_promo" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "remove_promo" says "remove": a word for removing or ending something.

    What this check looks for
  • Warnstudio_options

    The server marks "studio_options" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "start": a word for a change.

    What this check looks for
  • Warndesigner_uploads

    The server marks "designer_uploads" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "designer_uploads" says "upload": a word for a change.

    What this check looks for
  • Warndesigner_remove_from_colorway

    The server marks "designer_remove_from_colorway" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "designer_remove_from_colorway" says "remove": a word for removing or ending something.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

36 tools

Deletes or cancels 3Claude Code: deny
  • cart_removeRemove a cart line by its index (from view_cart).No findings

    Why it is in this group

    • The name "cart_remove" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove a cart line by its index (from view_cart). Args: index.

    Annotations the server declares

    • title: Remove cart line
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • designer_remove_from_colorwayTake one of my designs out of its set — it gets its own catalog card again.1 finding

    Why it is in this group

    • The name "designer_remove_from_colorway" says "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "designer_remove_from_colorway" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "designer_remove_from_colorway" says "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Take one of my designs out of its set — it gets its own catalog card again. A set left with a single variant is dissolved. Args: design_id.

    Annotations the server declares

    • title: Remove from a colorway set
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • remove_promoRemove the applied promo code from the cart.1 finding

    Why it is in this group

    • The name "remove_promo" says "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "remove_promo" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "remove_promo" says "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Remove the applied promo code from the cart.

    Annotations the server declares

    • title: Remove promo code
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Can't be undone 1Claude Code: ask
  • submit_designSend one of the designer's own artworks for moderation.No findings

    Why it is in this group

    • The name "submit_design" says "submit": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send one of the designer's own artworks for moderation. TWO inputs, same path: either artwork files — front/back accept a public image URL OR an upload_id from designer_upload_slot — or session_id of a FINISHED Studio session of theirs (generated with studio_generate; no need to download the print, we fetch it server-side). Args: name (required), front OR session_id (one of them), back?, layout? ('front_back' default, or 'r10' for a ready print-side file), note?, batch? (same string across a bulk run so the moderator sees them as one batch). Minimum 2048px on the short side. IMPORTANT for the designer: this queues the artwork for moderation — catalog listing follows production and is not instant.

    Annotations the server declares

    • title: Submit artwork
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Changes things 23Claude Code: ask
  • add_custom_to_cartPut a FINISHED custom print into the cart as a product.No findings

    Why it is in this group

    • The name "add_custom_to_cart" says "add": a word for a change.
    Description, as the server wrote it
    Put a FINISHED custom print into the cart as a product. Args: print_id (must be done), product? (same set as studio_generate), size, qty?. Then the normal checkout flow applies (get_order_preview -> prepare_order).

    Annotations the server declares

    • title: Add custom print to cart
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • add_to_cartAdd a product to the user's cart.No findings

    Why it is in this group

    • The name "add_to_cart" says "add": a word for a change.
    Description, as the server wrote it
    Add a product to the user's cart. Args: good_id (from search/get_product), size (must be one of the product's sizes), fabric? (if the product offers a choice), qty? (default 1). Returns the updated cart.

    Annotations the server declares

    • title: Add to cart
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • apply_promoValidate and apply a promo code to the cart (server-checked).No findings

    Why it is in this group

    • The name "apply_promo" says "apply": a word for a change.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Validate and apply a promo code to the cart (server-checked). Returns the new discount/shipping/total, or applied=false with a reason. Args: code.

    Annotations the server declares

    • title: Apply promo code
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • cart_updateChange a cart line by its index (from view_cart): set qty (0 removes), or switch size/fabric.No findings

    Why it is in this group

    • The name "cart_update" says "update": a word for a change.
    Description, as the server wrote it
    Change a cart line by its index (from view_cart): set qty (0 removes), or switch size/fabric. Args: index, qty?, size?, fabric?.

    Annotations the server declares

    • title: Update cart line
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_colorwayGroup my recolours of ONE artwork into a set (2+ of my designs).No findings

    Why it is in this group

    • The name "create_colorway" says "create": a word for a change.
    Description, as the server wrote it
    Group my recolours of ONE artwork into a set (2+ of my designs). The catalog then shows one card for the set; every variant keeps its own page and link. Args: design_ids (list of my design ids), primary? (which one represents the set).

    Annotations the server declares

    • title: Create a colorway set
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • designer_add_to_colorwayAdd one more of my recolours to a set of mine.No findings

    Why it is in this group

    • The name "designer_add_to_colorway" says "add": a word for a change.
    Description, as the server wrote it
    Add one more of my recolours to a set of mine. Args: colorway_id, design_id.

    Annotations the server declares

    • title: Add to a colorway set
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • designer_colorwaysMy colorway sets: one catalog card per set instead of one per colour.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    My colorway sets: one catalog card per set instead of one per colour. No args.

    Annotations the server declares

    • title: List my colorway sets
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • designer_designsThe user's own published designs with live status (products on sale / hidden / pending).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The user's own published designs with live status (products on sale / hidden / pending). Args: limit? (default 50).

    Annotations the server declares

    • title: List my designs
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • designer_statsThe user's designer-program stats (if they are a designer-partner): units sold, revenue, accrued royalties, available for payout, royalty percent, their designer page URL.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The user's designer-program stats (if they are a designer-partner): units sold, revenue, accrued royalties, available for payout, royalty percent, their designer page URL.

    Annotations the server declares

    • title: Designer stats
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • designer_submissionsThe user's Studio publications in moderation: in review / in catalog / needs changes.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The user's Studio publications in moderation: in review / in catalog / needs changes. Args: limit?.

    Annotations the server declares

    • title: List my submissions
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • designer_upload_slotGet a short-lived URL to upload an image file to us (use when the designer has no public link — otherwise pass the URL straight to submit_design).No findings

    Why it is in this group

    • The name "designer_upload_slot" says "upload": a word for a change.
    Description, as the server wrote it
    Get a short-lived URL to upload an image file to us (use when the designer has no public link — otherwise pass the URL straight to submit_design). Args: filename?. PUT the raw bytes to upload_url, then pass the returned upload_id to submit_design.

    Annotations the server declares

    • title: Get an upload URL
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • designer_uploadsWhat the designer has already sent in and where it stands: in review / accepted / needs changes (with the reason).1 finding

    Why it is in this group

    • The name "designer_uploads" says "upload": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "designer_uploads" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "designer_uploads" says "upload": a word for a change.

      What this check looks for
    Description, as the server wrote it
    What the designer has already sent in and where it stands: in review / accepted / needs changes (with the reason). Args: limit?.

    Annotations the server declares

    • title: My uploads
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_productFull details of one product by its code: available sizes, fabrics, per-variant price, and the design 'about' text.1 finding

    Why it is in this group

    • The name "get_product" says "get": a word for reading.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "get_product" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_product" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Full details of one product by its code: available sizes, fabrics, per-variant price, and the design 'about' text. Args: code (from search_products).

    Annotations the server declares

    • title: Get product details
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • prepare_orderCreate a draft order from the cart + address + promo and return {checkout_url, draft_id, expires_at}.No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Create a draft order from the cart + address + promo and return {checkout_url, draft_id, expires_at}. The human opens checkout_url — everything is pre-filled — reviews and pays. The agent never pays. Call get_order_preview and confirm with the human first.

    Annotations the server declares

    • title: Prepare checkout
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • set_cart_quantityChange the quantity of a cart line by its index (from view_cart); qty=0 removes it.No findings

    Why it is in this group

    • The name "set_cart_quantity" says "set": a word for a change.
    Description, as the server wrote it
    Change the quantity of a cart line by its index (from view_cart); qty=0 removes it. Args: index, qty.

    Annotations the server declares

    • title: Set cart quantity
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • set_colorway_primaryChoose which variant of my set represents it in the catalog.No findings

    Why it is in this group

    • The name "set_colorway_primary" says "set": a word for a change.
    Description, as the server wrote it
    Choose which variant of my set represents it in the catalog. Args: colorway_id, design_id.

    Annotations the server declares

    • title: Set the face of a colorway set
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • set_shipping_addressSet the shipping address for this order (validated).Can send data outNo findings

    Why it is in this group

    • The name "set_shipping_address" says "set": a word for a change.

    What it can reach

    • outboundThe input takes a destination (input.phone): what the tool writes goes there.
    Description, as the server wrote it
    Set the shipping address for this order (validated). Args: name, country, city, address, zip?, phone.

    Annotations the server declares

    • title: Set shipping address
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • set_shipping_methodChoose a shipping method by its option_id (from get_shipping_options).No findings

    Why it is in this group

    • The name "set_shipping_method" says "set": a word for a change.
    Description, as the server wrote it
    Choose a shipping method by its option_id (from get_shipping_options). Args: option_id.

    Annotations the server declares

    • title: Set shipping method
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • set_user_prefsSave the shopper's default size and/or fit so they don't re-enter it each time.No findings

    Why it is in this group

    • The name "set_user_prefs" says "set": a word for a change.
    Description, as the server wrote it
    Save the shopper's default size and/or fit so they don't re-enter it each time. Args: size (XS…5XL), fit (basic | oversized). Pass only what the user stated.

    Annotations the server declares

    • title: Save size/fit
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • studio_creditsThe user's Studio credit balance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The user's Studio credit balance. Check before studio_generate (1 credit per generation, either engine; welcome bonus 20; every bought tee adds 20).

    Annotations the server declares

    • title: Check Studio credits
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • studio_generateGenerate a CUSTOM t-shirt print from a text prompt (AI, takes 2-10 min).Reads text others writeNo findings

    Why it is in this group

    • The name "studio_generate" says "generate": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Generate a CUSTOM t-shirt print from a text prompt (AI, takes 2-10 min). SPENDS THE ACCOUNT OWNER'S STUDIO CREDITS: tell them the cost and their balance and get a yes BEFORE calling this — never spend silently, and never spend to 'try something' on your own initiative. Credits are earned (20 free on signup, 20 with every tee bought), so a wasted one is a real loss to them. Free exception: preserve=true prints their own image as-is and costs nothing. IMPORTANT: first call studio_options and ask the human to pick placement + product (and optionally background); do NOT silently use defaults. Args: prompt (design description), product? (one of ['kids_basic_tshirt_boy', 'kids_basic_tshirt_girl', 'kids_oversize_tshirt_boy', 'kids_oversize_tshirt_girl', 'mens_basic_tshirt', 'mens_oversize_tshirt', 'womens_basic_tshirt', 'womens_oversize_tshirt']), background? (t-shirt background, one of ['washed-beige', 'washed-black', 'washed-blue', 'washed-brown', 'washed-gray', 'washed-green', 'washed-orange', 'washed-pink', 'washed-red', 'washed-yellow', 'watercolor-beige', 'watercolor-blue', 'watercolor-sky']), placement? (print size/position, one of ['portrait_extended', 'square_center', 'chest_small']), model? (nb2 default | gpt-image-2 — both 1 credit, different styles), image_url? (https link to the user's OWN image — used as style/subject reference), preserve? (true = print the user's image exactly as-is, no AI redraw — kids' drawings, own art; FREE, no credits; requires image_url). Returns print_id — poll studio_status until done.

    Annotations the server declares

    • title: Generate custom print
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • studio_optionsSTART HERE for any custom-print request: the menu of generation choices (print placements with plain-language descriptions, products, backgrounds, engines+costs).1 finding

    Why it is in this group

    • The description's first verb is "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "studio_options" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "start": a word for a change.

      What this check looks for
    Description, as the server wrote it
    START HERE for any custom-print request: the menu of generation choices (print placements with plain-language descriptions, products, backgrounds, engines+costs). Present these to the human — at minimum ask which PLACEMENT and which PRODUCT they want — before calling studio_generate.

    Annotations the server declares

    • title: Custom print options
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 9Claude Code: allow
  • get_order_previewFull order summary to show the human before ordering: line items, promo/discount, shipping, address, grand total.No findings

    Why it is in this group

    • The name "get_order_preview" says "get": a word for reading.
    Description, as the server wrote it
    Full order summary to show the human before ordering: line items, promo/discount, shipping, address, grand total. Prices are server-computed.

    Annotations the server declares

    • title: Preview order
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_saved_addressesReturn shipping addresses the user used in past orders — offer these to a returning buyer instead of asking again.No findings

    Why it is in this group

    • The name "get_saved_addresses" says "get": a word for reading.
    Description, as the server wrote it
    Return shipping addresses the user used in past orders — offer these to a returning buyer instead of asking again.

    Annotations the server declares

    • title: Get saved addresses
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_shipping_optionsAvailable shipping methods for the current cart/address, with price and ETA (free over the threshold).No findings

    Why it is in this group

    • The name "get_shipping_options" says "get": a word for reading.
    Description, as the server wrote it
    Available shipping methods for the current cart/address, with price and ETA (free over the threshold).

    Annotations the server declares

    • title: Get shipping options
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_user_prefsReturn the shopper's saved default size and fit.No findings

    Why it is in this group

    • The name "get_user_prefs" says "get": a word for reading.
    Description, as the server wrote it
    Return the shopper's saved default size and fit. Call this BEFORE asking the user for a size — if a default is set, apply it automatically (add_to_cart uses it when size is omitted), and prefer products matching their fit (basic vs oversized).

    Annotations the server declares

    • title: Get saved size/fit
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_collectionsList active curated collections (themed landing pages) with their slugs and urls.Reads text others writeNo findings

    Why it is in this group

    • The name "list_collections" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "list" and "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    List active curated collections (themed landing pages) with their slugs and urls. Args: limit?.

    Annotations the server declares

    • title: List collections
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • order_statusLook up the user's recent orders (or one by number) and their fulfilment status.No findings

    Why it is in this group

    • The name "order_status" says "status": a word for reading.
    Description, as the server wrote it
    Look up the user's recent orders (or one by number) and their fulfilment status. Args: number?, limit? (default 5).

    Annotations the server declares

    • title: Check order status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_productsSearch the allover.art catalog (one card per design).No findings

    Why it is in this group

    • The name "search_products" says "search": a word for reading.
    Description, as the server wrote it
    Search the allover.art catalog (one card per design). Args: query? (free text, e.g. 'cat', 'neon koi'), theme? (canonical theme like Cats/Anime/Skulls, comma-separated for several), section? (mens|womens|kids), limit? (<=48), max_price? (USD). Returns product cards with good_id, price and url.

    Annotations the server declares

    • title: Search catalog
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • studio_statusCheck a custom print generation.No findings

    Why it is in this group

    • The name "studio_status" says "status": a word for reading.
    Description, as the server wrote it
    Check a custom print generation. Args: print_id (from studio_generate). When done returns preview_url — show it to the human.

    Annotations the server declares

    • title: Check print generation
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • view_cartShow the current contents of the user's cart (the same cart they see in the browser when signed in).Reads text others writeNo findings

    Why it is in this group

    • The name "view_cart" says "view": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "show" and "browser": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Show the current contents of the user's cart (the same cart they see in the browser when signed in).

    Annotations the server declares

    • title: View cart
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write3
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:24 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
27
Protocol version
2025-03-26
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
none
RFC 9728 protected resource metadata
https://allover.art/.well-known/oauth-protected-resource/mcp
Authorization servers
https://allover.art
Legacy HTTP+SSE transport
no
Dynamic client registration
yes
Client ID metadata documents
no
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 27 tools that change things (3 destructive, 1 irreversible, 23 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://allover.art/mcp: tools/list returned 36 tools to an anonymous client, including cart_remove (destructive), remove_promo (destructive), designer_remove_from_colorway (destructive), submit_design (irreversible), get_product (write) and 22 more

    What this check looks for

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agentee https://allover.art/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agentee__search_products",
      "mcp__agentee__list_collections",
      "mcp__agentee__view_cart",
      "mcp__agentee__order_status",
      "mcp__agentee__get_user_prefs",
      "mcp__agentee__get_saved_addresses",
      "mcp__agentee__get_shipping_options",
      "mcp__agentee__get_order_preview",
      "mcp__agentee__studio_status"
    ],
    "ask": [
      "mcp__agentee__get_product",
      "mcp__agentee__add_to_cart",
      "mcp__agentee__set_cart_quantity",
      "mcp__agentee__checkout_link",
      "mcp__agentee__cart_update",
      "mcp__agentee__apply_promo",
      "mcp__agentee__set_user_prefs",
      "mcp__agentee__set_shipping_address",
      "mcp__agentee__set_shipping_method",
      "mcp__agentee__prepare_order",
      "mcp__agentee__studio_options",
      "mcp__agentee__studio_generate",
      "mcp__agentee__studio_credits",
      "mcp__agentee__add_custom_to_cart",
      "mcp__agentee__designer_stats",
      "mcp__agentee__designer_designs",
      "mcp__agentee__designer_upload_slot",
      "mcp__agentee__submit_design",
      "mcp__agentee__designer_uploads",
      "mcp__agentee__designer_submissions",
      "mcp__agentee__designer_colorways",
      "mcp__agentee__create_colorway",
      "mcp__agentee__designer_add_to_colorway",
      "mcp__agentee__set_colorway_primary"
    ],
    "deny": [
      "mcp__agentee__cart_remove",
      "mcp__agentee__remove_promo",
      "mcp__agentee__designer_remove_from_colorway"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as agentee. Review it before you use it.

Capability tags behind 4 rules
  • mcp__agentee__list_collections untrusted-input
  • mcp__agentee__view_cart untrusted-input
  • mcp__agentee__set_shipping_address outbound
  • mcp__agentee__studio_generate untrusted-input